This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Cawa-DODLcgEccenA7kSlmsMJQk.roa File: Cawa-DODLcgEccenA7kSlmsMJQk.roa (raw, json) Hash identifier: iTOAQgX2G9bRdF7X+s3MxrFF2agAxk0qoBnqwrYlVYk= Subject key identifier: 09:AC:1A:F8:33:83:2D:C8:04:71:C7:A7:03:B9:12:96:6B:0C:25:09 Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED2988DF00EC96223499730E394DF5 Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Cawa-DODLcgEccenA7kSlmsMJQk.roa Signing time: Thu 01 Jan 2026 14:19:04 +0000 ROA not before: Thu 01 Jan 2026 14:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211655 IP address blocks: 192.102.225.0/24 maxlen: 24 2001:7f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:29:88:df:00:ec:96:22:34:99:73:0e:39:4d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09ac1af833832dc80471c7a703b912966b0c2509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:99:a2:97:d6:8d:1f:1f:c3:30:81:ea:ce: a2:ae:37:57:c6:ae:7a:ac:38:bf:3f:6a:72:2e:13: 67:81:55:f4:f8:6b:d6:8f:20:bf:f7:d9:a6:27:4b: e4:91:f1:92:46:34:7e:10:47:21:81:16:3d:2f:31: d8:db:5f:72:8c:4d:9d:20:ea:32:13:85:31:b6:d0: 77:66:8a:a7:07:1e:34:57:7d:6c:06:fa:41:a4:24: 1c:0e:ed:54:aa:52:ea:91:08:6d:a2:4f:de:aa:08: 8e:30:0e:70:4e:1a:6b:15:2d:e2:ee:a2:fd:5e:11: 2b:7d:2a:de:69:f9:c5:64:2e:6c:e3:10:49:5a:2b: 7d:91:11:51:27:ef:50:39:0d:91:58:52:c0:d4:c2: 34:f0:a1:32:1d:1e:0f:bd:ad:55:a7:8b:1b:33:e6: eb:1d:31:5c:d8:e4:58:ed:66:90:a3:8a:3b:b5:76: 09:ab:75:c6:78:e5:d6:53:a2:8a:d3:30:9a:ea:90: 93:28:bd:29:47:6e:d1:db:32:94:eb:67:08:9a:57: a3:81:dc:d2:12:a1:15:63:6d:34:9b:b9:61:9d:3d: 6f:e3:53:3a:b6:e4:29:c8:51:70:c3:0d:1e:83:fb: a0:4e:4a:81:a8:55:12:2b:23:58:c4:05:51:75:ec: ae:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AC:1A:F8:33:83:2D:C8:04:71:C7:A7:03:B9:12:96:6B:0C:25:09 X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Cawa-DODLcgEccenA7kSlmsMJQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.102.225.0/24 IPv6: 2001:7f9::/48 Signature Algorithm: sha256WithRSAEncryption 04:ea:ec:ab:3c:27:49:9f:a6:1b:85:44:49:aa:3f:c3:02:a2: 8c:66:01:7a:f7:8b:c9:12:85:f7:fc:7c:00:1b:3e:0b:a7:8d: 54:d1:8d:19:39:2d:bc:86:84:da:eb:46:cb:c3:1d:38:ff:fb: af:be:1b:b9:4e:0e:6c:ed:4e:32:c0:22:46:86:c6:3b:1c:4e: a1:85:6b:89:6e:98:39:2c:d8:25:41:3a:f6:2b:e9:f0:86:90: 9e:c4:73:98:38:d0:4f:a4:f4:b5:87:61:8a:83:08:58:38:35: 22:45:85:f1:e2:75:f9:c7:80:f1:f6:a7:38:04:16:d9:ff:9a: d3:1f:3e:b5:40:33:5c:fd:cd:a2:9f:9b:f2:02:a7:7f:88:67: b5:1c:d5:22:4e:d1:c7:61:60:70:33:ae:f5:15:82:31:e5:5b: 78:cf:21:84:6b:c7:c3:58:cc:8d:28:cc:c0:1e:3b:48:61:59: ea:a7:94:7c:d7:c8:f8:c2:8b:10:2a:66:e0:78:21:74:83:8a: 3e:66:da:84:74:68:67:83:38:e6:fb:84:ad:5e:cc:2e:c4:2c: b2:68:24:e1:71:f0:72:d6:d5:98:c8:c7:9a:bf:9e:bf:ce:cf: 6b:4f:52:a7:c4:f2:b5:d4:8b:53:a2:aa:9f:d7:a8:0a:24:0c: e7:6c:b2:5c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57SmI3wDsliI0mXMOOU31MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWFjMWFmODMzODMyZGM4MDQ3MWM3YTcwM2I5MTI5NjZiMGMyNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjyZopfWjR8fwzCB6s6irjdXxq56 rDi/P2pyLhNngVX0+GvWjyC/99mmJ0vkkfGSRjR+EEchgRY9LzHY219yjE2dIOoy E4UxttB3ZoqnBx40V31sBvpBpCQcDu1UqlLqkQhtok/eqgiOMA5wThprFS3i7qL9 XhErfSreafnFZC5s4xBJWit9kRFRJ+9QOQ2RWFLA1MI08KEyHR4Pva1Vp4sbM+br HTFc2ORY7WaQo4o7tXYJq3XGeOXWU6KK0zCa6pCTKL0pR27R2zKU62cImlejgdzS EqEVY200m7lhnT1v41M6tuQpyFFwww0eg/ugTkqBqFUSKyNYxAVRdeyuowIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAmsGvgzgy3IBHHHpwO5EpZrDCUJMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvQ2F3YS1ET0RMY2dFY2NlbkE3a1NsbXNNSlFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwGbhMA8E AgACMAkDBwAgAQf5AAAwDQYJKoZIhvcNAQELBQADggEBAATq7Ks8J0mfphuFREmq P8MCooxmAXr3i8kShff8fAAbPgunjVTRjRk5LbyGhNrrRsvDHTj/+6++G7lODmzt TjLAIkaGxjscTqGFa4lumDks2CVBOvYr6fCGkJ7Ec5g40E+k9LWHYYqDCFg4NSJF hfHidfnHgPH2pzgEFtn/mtMfPrVAM1z9zaKfm/ICp3+IZ7Uc1SJO0cdhYHAzrvUV gjHlW3jPIYRrx8NYzI0ozMAeO0hhWeqnlHzXyPjCixAqZuB4IXSDij5m2oR0aGeD OOb7hK1ezC7ELLJoJOFx8HLW1ZjIx5q/nr/Oz2tPUqfE8rXUi1Oiqp/XqAokDOds slw= -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:48 2026 by rpki-client